SUSE CVE-2014-9666

The ttsbitdecoderinit function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote attackers to cause a denial of service integer overflow and out-of-bounds read or possibly have unspecified other impact via ...

PT-2015-4329

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to the tt sbit decoder load image function in sfnt/ttsbit.c, which does not properly check for an integer overflow. This allows remote attackers to cause a denial of service...

PT-2015-4339

Name of the Vulnerable Software and Affected Versions FreeType versions prior to 2.5.4 Description The issue is related to the tt sbit decoder init function in sfnt/ttsbit.c, which does not restrict the count value, leading to a potential denial of service due to integer overflow and out-of-bound...